$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4859443b-249c-3fba-8db4-46b941af7483.roa File: 4859443b-249c-3fba-8db4-46b941af7483.roa (raw, json) Hash identifier: 7TF4cDdQ3bXgIYTzTbE8TQu8KAFFOHuABZQIMIgumtY= Subject key identifier: 34:F9:04:7D:71:D6:A7:08:B9:96:57:76:B7:13:14:3E:A3:6E:B5:4F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA6BABCB4D19508B4C800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4859443b-249c-3fba-8db4-46b941af7483.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 36104 IP address blocks: 63.255.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a6:ba:bc:b4:d1:95:08:b4:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=b69d4edb-0147-4268-b148-5494623eca26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e2:65:80:38:5e:1c:e9:72:3b:f8:64:81:d6: e5:f7:c2:a4:cc:4b:9b:04:53:54:95:2f:58:16:38: fb:b1:87:02:c9:1c:29:da:0e:9b:cc:a1:91:51:80: 20:8a:7f:e9:21:c3:c7:bc:23:82:e7:96:33:a7:e7: aa:ed:2b:3f:6f:e7:d5:09:72:27:50:8b:a4:81:a1: 04:57:2c:d9:f2:58:68:41:07:fb:80:51:44:6d:3c: a2:36:54:10:22:ef:d4:0f:e7:f7:89:a3:51:14:69: 2c:a5:d1:4a:85:bb:4f:0f:82:f4:91:32:a8:f1:d0: 97:ac:8c:6e:7c:c2:ab:8d:57:3f:80:6e:7b:09:b3: 7b:b0:8f:e2:51:08:cc:29:13:ff:18:fb:3e:35:ca: b0:55:b8:97:7e:c0:d1:b7:59:d7:3d:15:42:bb:d8: e2:10:86:d0:c4:72:22:86:d2:75:57:e6:4a:3f:14: 58:c5:c6:9c:5b:5f:20:46:5e:b1:57:7d:3a:c7:62: 2d:63:61:9d:81:97:5f:fd:c0:d6:01:eb:7d:3d:13: 63:fb:5c:fe:87:f2:45:ac:83:1b:cf:93:86:89:4e: e1:7b:f8:cb:fc:06:df:50:10:0d:c2:c3:08:71:cf: 7a:5c:67:7e:d1:b4:ab:11:6b:6b:ab:55:67:b1:46: 02:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F9:04:7D:71:D6:A7:08:B9:96:57:76:B7:13:14:3E:A3:6E:B5:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4859443b-249c-3fba-8db4-46b941af7483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.255.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:34:ab:1d:c5:1f:a1:e3:ce:58:8f:15:86:e8:a4:df:fe:58: b5:70:0a:01:c7:b2:6f:0f:2f:49:f0:b6:a1:9b:19:fc:b3:57: 7b:92:78:40:f0:61:bd:51:2a:2d:f4:b7:56:70:9f:be:6f:43: 2f:ca:cb:5e:33:80:18:a6:37:c3:55:4d:af:ad:75:a1:65:31: af:43:41:c6:28:a4:8a:09:02:44:c3:74:c5:16:b9:96:26:7f: bb:77:6c:c2:35:c5:e6:b0:f5:5e:54:15:ef:c0:36:8f:66:d7: 82:fc:d5:f5:b1:5c:bb:91:6d:fa:3d:bc:fa:89:37:1f:ad:cd: 1d:52:b3:09:22:30:45:3d:9c:6d:b5:43:45:ab:4f:c7:e0:6e: 22:67:87:9a:b3:f4:4b:49:54:09:1a:66:5e:fd:f0:12:0b:75: 87:d5:9f:a0:ca:38:2d:bc:45:2e:30:ab:01:29:01:22:ff:4c: 26:aa:60:c7:d8:82:4a:c3:67:2d:75:d3:9d:11:b1:cb:12:58: 61:52:d6:e6:62:e3:f5:1c:da:33:8e:6b:df:75:e8:38:4d:02: d7:16:4d:56:36:57:15:6a:7a:b9:6e:c9:2c:4a:c2:16:9d:4d: a0:77:07:b3:cb:2a:2d:d1:25:bd:2b:12:40:76:20:95:b6:5b: 89:2f:58:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCqa6vLTRlQi0yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YjY5ZDRlZGItMDE0Ny00MjY4LWIxNDgtNTQ5NDYyM2VjYTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeJlgDheHOlyO/hkgdbl98KkzEubBFNUlS9Y Fjj7sYcCyRwp2g6bzKGRUYAgin/pIcPHvCOC55Yzp+eq7Ss/b+fVCXInUIukgaEE VyzZ8lhoQQf7gFFEbTyiNlQQIu/UD+f3iaNRFGkspdFKhbtPD4L0kTKo8dCXrIxu fMKrjVc/gG57CbN7sI/iUQjMKRP/GPs+NcqwVbiXfsDRt1nXPRVCu9jiEIbQxHIi htJ1V+ZKPxRYxcacW18gRl6xV306x2ItY2GdgZdf/cDWAet9PRNj+1z+h/JFrIMb z5OGiU7he/jL/AbfUBANwsMIcc96XGd+0bSrEWtrq1VnsUYCnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDT5BH1x1qcIuZZXdrcTFD6jbrVPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDg1OTQ0M2ItMjQ5Yy0z ZmJhLThkYjQtNDZiOTQxYWY3NDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/89MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABM0qx3FH6HjzliPFYbopN/+WLVwCgHHsm8PL0nwtqGbGfyzV3uSeEDw Yb1RKi30t1Zwn75vQy/Ky14zgBimN8NVTa+tdaFlMa9DQcYopIoJAkTDdMUWuZYm f7t3bMI1xeaw9V5UFe/ANo9m14L81fWxXLuRbfo9vPqJNx+tzR1SswkiMEU9nG21 Q0WrT8fgbiJnh5qz9EtJVAkaZl798BILdYfVn6DKOC28RS4wqwEpASL/TCaqYMfY gkrDZy11050RscsSWGFS1uZi4/Uc2jOOa9916DhNAtcWTVY2VxVqerluySxKwhad TaB3B7PLKi3RJb0rEkB2IJW2W4kvWH8= -----END CERTIFICATE-----Generated at Thu Mar 26 18:26:52 2026 by rpki-client